← Database

CVE-2022-32747

HIGH CVSS: 8.0 Published: 2023-01-30 Modified: 2026-06-17

Description

A CWE-290: Authentication Bypass by Spoofing vulnerability exists that could cause legitimate users to be locked out of devices or facilitate backdoor account creation by spoofing a device on the local network. Affected Products: EcoStruxure™ Cybersecurity Admin Expert (CAE) (Versions prior to 2.2)

Affected Platforms

Schneider-Electric Ecostruxure Cybersecurity Admin Expert

Weakness Type

CWE-290

References